REST API: GET params, not GET data