there's a convention for checking for required parameters, see other methods in controller.js