Started using the signed_form gem for authorizing parameters on forms. Signed_form is by @erichmenge