Avoid warning about Symbol DoS on safe params

This is the promised follow-up to #538 in order to ignore symbolizing of `params[:controller]` and `params[:action]`.

I don't plan to make any further reductions to false positives of this kind. Instead, `CheckSymbolDoS` will be an optional check starting in Brakeman 3.0.