changing param to req.body