set content-type, make /transfer use GET