For security - checking accepts headers for unknown/ non-JSON accepts