added some security for the provided parameters
handle associated attributes properly
improve possibilities of +action+ block

now possible to access every attribute of the record