controller accepts param from query