Include the request headers in the event data

Some request headers may contain data useful or even critical to
verifying that an incoming request is valid. (For example, a secret
key.)
Add text/plain as a supported content-type

AWS (and others) are forcing our hand here.
Be more direct when suggesting security measures
Fleshed out a full example of request -> event -> reactor