introduced param $view to make it different from $action that is protected by sesskey