Allow non-express based applications to use strategy.

This passport strategy relied on express's `request.param()` function. However, I'm using it in a connect application; no such function exists.

This PR checks to see if there is a `.param` function on the request object, and if not, adds one.