Better coherence with Rails param scrubbing behavior

Also eliminates the potential DOS vulnerability of calling `to_sym` on all params (symbols aren't garbage collected).