Defers call to symbolize!

Rewrite #_whitelist so it does not depend on the keys in the params
being symbols.  This was done in response to code review.
Adds the 'Validatable' module.

Moves code out of Lotus::Action into a mixin.