don't mutate request object