fix #111: shouldRetainParam() should handle 'code'

shouldRetainParam function doesn't work as advertised in a comment,
return false if given 'code', 'code=', or 'code=a'