Use core required_param for toggle parameters.

 - delegate security responsibility of HTTP parameters to core Moodle
   code.
 - PARAM_RAW is sufficient, since always filtering topcoll parameters.
 - This work was made possible through funding from Te Rito Maioha Early
   Childhood New Zealand.