we could also force the use of params here thus validating the signature