don't error if content-type missing. auto cors for http-stream