why not pass req directly?