JS: Fix lurking cartesian product in Express

javascript/ql/src/semmle/javascript/frameworks/Express.qll

@@ -415,9 +415,6 @@ module Express {
           )
         )
         or
-        kind = "body" and
-        this.asExpr() = rh.getARequestBodyAccess()
-        or
         exists(string propName |
           // `req.url` or `req.originalUrl`
           kind = "url" and
@@ -432,6 +429,9 @@ module Express {
         this.(DataFlow::PropRef).accesses(request, "cookies")
       )
       or
+      kind = "body" and
+      this.asExpr() = rh.getARequestBodyAccess()
+      or
       exists(RequestHeaderAccess access | this = access |
         rh = access.getRouteHandler() and
         kind = "header"