Update README.md

With Rails 4 or Strong Parameters gem, you should carefully define permitted params.

It may be not obvious, so I added two lines to the README.md :)