change req.body to req.query to match the get request method