cattr_accessor ActionController::Parameters.always_permitted_parameters should use block for default