named params; allow request for controllers