+ support for CORS and relaxed content-type acceptance