Strong parameters

One day, when Rails 4 is released, Spree is going to need to support strong_parameters. Here's the foundations for a pull request for strong parameters. 

There's obviously quite a lot more work to be done, but it should be an easy transition over.