Done this way rather than just returning the boolean resultant of the conditional so that the logic gets short-circuited and we don't need to JSON-parse the request body if we don't absolutely have to.