Sometimes there is no post data that can be decoded.

Turns out if you specify a long enough key shit hits the fan. In addition
to throwing bad parse errors, we also now don't always expect a request body.