all pathparams, no queryparams (only to login)