if people explicitly want to flash the body of a request, they should be allowed to..