saved query calls are POST calls
no mass assignment for saved query
my own version of sanitize_sql_hash_for_conditions because of the bug in Rails 4.0.0: https://github.com/rails/rails/commit/a6bc35c82cd58aac61608391f38fda4e034be0f7#diff-1