better redirect
strong params
test update with params