use accept header for JOSE requests