fix strong params on plugins, tweak ui

fixes #486 items 1, 2, and 3