fix: explicitly check that request.body is a string

fix: explicitly check that request.body is a string #2089