Include route params in HMAC validation.
Smarter delightboxURL() parameter handling.
Merge branch 'release-2.3'