Remove extraneous assignment to older name of body

We used to use content field instead of body -  am remving last vestigages of that
Introduce HTTPException passing

I am avoiding aboirt() as it is too broad, and passing up Exceptions that
can be caught in calling work
Always pass requiesting USer through to model for security check

also change to_dict to jsonable, but avoid jsonencoder