Use req.params instead of req.query

In update, delete and find we should use `req.params` instead of `req.query`.