Whoa, hold up. Why are we using `req.body` again? #164 changed this to use `params` so that we would not need to be validating whether the body is an object or not, because restify's `bodyParser` does that for us and maps the result to `params`. Can you revert this change, please? Same goes for the equivalent change in the `PUT` endpoint below.