My first glance, when compared against this documentation page for CGI.pm, is that you need to use an array not a hash here.

Now, what this has to do with Mojolicious, I don’t know...

Also, check the usual suspects:   use a client-side debugger to verify what the URL string actually contains (“trust, but verify ...”), and likewise what CGI thinks it received.