The req.param(name) helper that used to magically look up values from multiple places has been removed. This potentially confusing and dangerous method of retrieving form data has been removed. You will now need to specifically look for the submitted parameter name in the req.params, req.body, or req.query object.
Examples
Replacing req.param('body') and req.param('query')
Replace req.param('body') with req.body and req.param('query') with req.query.