api: set content type header on response