add req.params[this._hashParam] != undefined in authenticate condition.