Use .to_s instead of .to_sym to compare action.name

to avoid DoS through params[].to_sym memory leak

http://brakemanscanner.org/docs/warning_types/denial_of_service/