add tests to verify that we allow verification request parameters to ride in...

add tests to verify that we allow verification request parameters to ride in the path, or in the content body.  wierd, but it's our contract, let's test it!  Also, add test of misset content-type