Permitting arrays within a hash in strong_parameters

See: rails/strong_parameters#121

// PR coming soon