Merge pull request #534 from arthurnn/fix_gemfile_lock

update safe_yaml, as 0.9.4 was yanked
use strong_parameters on decent_exposure

See https://github.com/voxdolo/decent_exposure/wiki/Strategies:-Use-with-strong_parameters
on how to use strong_parameters with decent_exposure