@jonlemmon I just added this line to stop the app choking on unpermitted params.
not sure if this is the best way, but I'm not sure how much more time should be spent on this