Rails4 strong parameters review

for #427