no more enforced JSON.parsing of request body
improved content type checking