make sure we read the request.body as the payload