don't mutate params inside request token