@anlai always make sure to ToList() here because you never want to send an open queryable outside of the controller