Use body for JSON, not a request parameter

This changes the API to receive the JSON data via the request body.