add strong params for sessions #82