Add :gift_code as a permitted attribute for strong parameters
Use order_params instead of accessing params directly