this wont work if req.body.name contain special characters