Use .to_s instead of .to_sym to compare action.name

to avoid DoS through params[].to_sym memory leak

http://brakemanscanner.org/docs/warning_types/denial_of_service/

https://github.com/upmin/upmin-admin-ruby/issues/110