Adds specs
Enables ForbiddenAttributesProtection for wiki
Uses permitted params in wiki controller
Fixes tests
Adds changelog entry