save original parameters
add :with parameters to :allow if :allow is enabled
configure routes with controller options
add tests form params protection