fixed the body parser issue

- used req.query instead of req.body