Don't trust Hails.Web.Router

Instead of unsafely relabeling request in `routeVar`, pass along extra
query parameters throughout routing.