ActiveModel::ForbiddenAttributesProtection has to be included in the Status model
sort permitted_parames-monster-hash alphabetically
give permitted params some sane whitespace
whitelist params for custom_fields
make custom_fields Rails3ish

- use ressource in routes.rb
- use *_custom_field_path paths
- use strong parameters everywhere
simplify move_to operations in permitted_params.rb
fix custom_fields_controller_spec
when having a wrong custom_field_type redirect to general custom_field page