controller now has strong parameters