merging URL params with user resource data is bad idea, revisit