Strict JSON decoding

We've added a new DecodeJSONStrict() helper, which will return an error if a JSON request contains unexpected fields.