api: make sure we test url param format