fix: use bodyparser to handle POST on route (*)