Check request header to detect allowed content-type. Closes #3

Signed-off-by: crynobone <crynobone@gmail.com>