Avoid setting content type on POST to avoid the CORS pre-flight