forward query args on protected