use strong_parameters instead of whitelisting attributes
first appearance of event model, far from finished