fixed #852: Possible to run any action by passing module/action parameters to invalid URL