- use http_get_request_body() on the server side