Rails 4 strong_parameters for #update