no adding stuff to req.query