Allow certain querystring params with POST/PUT

[c24w]

• the router will allow these values through validation
• still post all params in the body, if no payload is passed
• don't pass querystring param which has been used as a URL param

[gregsochanik]

Looks good to me