Allow requests via query parameters