Read body on PUTs. Always read query string, if there is one.
Implement logout