don't overwrite existing Content-type header in response

This allows the header to be set elsewhere, e.g. from an event script.