oh, because we're `POST`ing serialized JSON instead of params? we have to figure out a better way to do this. before we could use restify's `node-restify-validation` to do the validation based on query-string params. @soedar, @aricha: ideas?