make custom_fields Rails3ish

- use ressource in routes.rb
- use *_custom_field_path paths
- use strong parameters everywhere
simplify move_to operations in permitted_params.rb