is there a reason you're using the query string instead of the body?