Make arguments in the body json, not form data.

Note that this will break `haas.cli` if we merge it; we'll have to update that.
Apparently the `LimitRequestBody` option does what we want.