Merge pull request #2717 from memberful/2716-splat-sanitize-params

Splat the arguments to strong_parameters#permit, fixes #2716
Add Rails 4 related todo