Feature/4143 port to strong parameters

Now controllers use strong parameters and models don't use protected attributes anymore. Yay \o/