only json responses, no more 400 bad requests