Fix req.body.payload and double-parsing of JSON

a) req.body.payload doesn't work anymore (JSON is directly in req.body)
b) The payload doesn't need to be JSON parsed - it's being double-parsed here, causing "Unexpected token" errors