now pulls account_id from req.query