use header instead of query parameters. resolves #12