Use req.params instead of req.param()