add urldecode only when www-form-urlencoded

Won't this fail on the raw JSON data because there's no `data.payload`?