Watch your code-style:

```javascript
getUser(req.param...)
```

should be

```javascript
getUser( req.param( 'userid' ) ... );
```

Same thing for all other parameters in this section.