Added more forgiving `req.param()` check for token