Use req.params instead of req.param()

As we know, `req.param()` is going [to be deprecated](https://github.com/strongloop/express/issues/2440), so let's take some preventive steps :)