Adds specs
Enables ForbiddenAttributesProtection for wiki
Uses permitted params in wiki controller
Fixes tests
Adds changelog entry

Conflicts:
	doc/CHANGELOG.md