migrations and model
views
params function to avoid ForbiddenAttributesError
use kaminari 分頁