updated tests and view name inference
Added argument to render method: specify which instance variables to expose to the view by passing in a permit hash. API is now as narrow as possible