use JsonResponse instead of Response