updates attribute handling for rails 4

* uses strong parameters