proof that validation of query on GET works