update for 'strong parameters' in Rails 4 (fix #1)