ensure Content-Type header comes first