Better priority for version listener

- Needs to trigger _after_ the accept/content-type listeners, but early enough
  that authorization can see the results.