express, params and querystring vars