update docs
require parameter values to be passed in query string, while restricting