Rename handler func, set Content-Type header
Support Authorization header, not just ?access_token param
Lots of tiny awesome readability fixes, added some TODOs to keep track of them