Bugfix in loan_service.js; corrects typo

Issue with GET /users/:userId/loans/:loanId in loan_service.js -->
Changes request.body.loanId to request.params.loanId & request.body.url to request.url