use strong params in attachments controller
use strong parameters with message controller
use strong params in transcript controller