Fix reading database password (dbpassword) from req.param

Closes #134.
Does not come with a testcase (difficult to write one while not
in control of the database auth method).