anchor.diff:          } else if( (parameter.isNamed || new IsAnnotation<RequestParam>().onDeclaration(parameter))
               && (_ref = request.uri.queryParameters[MirrorSystem.getName(parameter.simpleName)]) != null) {
             namedArgs[parameter.simpleName] = _ref;
  -        } else if(new IsAnnotation<_RequestBody>().onDeclaration(parameter) 
  -            && data.isNotEmpty) {
  +        } else if(new IsAnnotation<_RequestBody>().onDeclaration(parameter) && data.isNotEmpty) {
             if(parameter.type.qualifiedName == _QN_LIST) {
               if(!(data as String).startsWith('[')) {
                 data = '[$data]';
  
positive.code:     } else {
        result = instanceMirror.invoke(methodMirror.simpleName, positionalArgs, namedArgs).reflectee;
      }
      result = result == null ? "" : serialize(result);
      if(removeBrackets) {
        result = result.substring(1, result.length - 1);
      }
      request.response
          ..write(result)
          ..close();
    } else {
      //TODO: convert this to a trhow NotAuthorizedException
      request.response
  
negative.code:       _ref1 = new GetValueOfAnnotation<AuthorizeIf>().fromInstance(instanceMirror),
        authorizedForController = (_ref1 == null) ? true : (user == null) ? false : _ref1.isAuthorized(user, _ref1),
        _ref2 = new GetValueOfAnnotation<AuthorizeIf>().fromDeclaration(methodMirror),
        authorizedForMethod = (_ref2 == null) ? true : (user == null) ? false : _ref2.isAuthorized(user, _ref2);
    
    if(authorizedForController && authorizedForMethod) {
  