Don't call to_sym on param

Calling to_sym on user input is dangerous because symbols aren't garbage-collected.