fix a misunderstanding between req.params and req.body