more refactoring in prep for a better cors story!
complete, essentially, content negotiation headers
more headers, etc.