Ensure the id param is the one from the route.

Just in case the user has a column named 'id' too, that would be in the body
params - if we say `params('route')` we can be confident we get the right one.