use params instead of session for outcome requests