Strong parameters for the entire app

- Moving mass-assignable logic from models to controllers using Rails'
  strong parameters.
- Moving the logic that decides whether a field is shown in a form or
  not from the views to the controllers, using the same methods that we
  use for strong params. That way we're making it even more maintainable
  since the logic is now in one place.

Fixes Issue #45