Fix bug preventing req.user from being included in params