moved request decoding into middleware
prototype of content-type validation middleware