Use 303 to be more correct
Account for content-type extensions
What if someone sends a buffer