Use Node's URL parser to pull the GET parameters off, and generally just...

... be safer