use url params instead of flash - closes #76