Include route params in HMAC validation.
Smarter delightboxURL() parameter handling.