Validate accept header for all requests, validate content-type header for POST, PUT, PATCH only.