the verifier is more helpful if you leave off content-type headers, also did you know we support application/json?  closes #643