Added checking 'Content-Type:application/json' for authentication callback requests.