replace req.body support with query support

closes #6