i am adding tests now for both situations. turns out that the restart in deliver would eat away exposing the hash for requests with "application/vnd.fos.user-context-hash" as we do end up with 3 lookups on the hash url, until the accept header is lost... cleaned up some more, will push and comment