revert an old commit and assign watcher parameters through mass assignment again. instead, add a validation in the model that ensures that the user is allowed to watch the watchable.