Please use new recommended protection model for params(strong_parameters)

http://stackoverflow.com/questions/15520151/rails-4-authentication