fix bug in app.param(login, cb)