routes: expect json payload instead of form

[crawford]

This changes the hook from accepting a x-www-form-urlencoded body to accept application/json instead.