all requests are GET