Don't validate `Content-Type` when request body is empty

This makes validation on incoming requests a little more forgiving.

Fixes #45.

/cc @dpiddy