activate strong params in core

This should happen after the 0.2.0 release. Just a starting point for using strong params in controllers.