Increase robustness of Ihat URL bootstrapping

[ci skip]
- When request is not JSON, reject it and log a warning
- Only assign ihat_supported_formats if it can be parsed as JSON