fake browsers: limit content type checks to AJAX requests.