dont sanitize the params in the actions controller either
fixed the device creation