params() no longer blends in JSON request body content, factored out deps on request_body() and request_headers() for future extraction