Allow easy permission check based on req.params

Allows to check individual permissions based on a routing parameter, so routes like this become possible:
```javascript
app.get("/article/:action", user.can({
        param: "action", 
        values: {
            "edit": "edit article",
            "delete": "delete article"
        }
}, routes.article);
```