Safer to user request.POST instead of params

params can come from either GET or POST