Add strict params for loans#create and test for same.