Fix ActiveModel::ForbiddenAttributes errors

Down to 1 failing spec