Clarifications to section 7.8

Addresses #367.
Conflating these together is confusing, since the content-type should actually not be in the burrowed form parameters for this to work with most clients. That should be clarified. Really, we need to add a list of headers that will be burrowed (either the headers or parameters that won't be headers must be whitelisted; there's no way to distinguish otherwise).