Pass guard methods all url parameters

Pass guard methods all url parameters - not just kind

As mentioned in #1
https://github.com/sauerbraten/crudapi/pull/1#issuecomment-18337073

> because authorization might sometimes depend on not just the kind of the class but also the id. e.g. a user is only allowed to modify an album whose creatorUserId == his own user.id

Passing all URL params would allow these methods to have access to both `kind` and `id`