Update forPathsMatching to handle params if specified

If the allowed URLs list passed to forPathsMatching contains querystring params, they are also checked against the request URL although with lower specificity.