Raise on unpermitted params in `test.rb`

I've been bitten by unpermitted params in tests silently *not* failing my specs.
You'd think that this would be set by default, but it doesn't seem to be.
Luckily, our `development.rb` has the setting, so when clicking through my app,
the bug cropped up.