Remove protected_attributes gem

- Use strong parameters instead.
- Define rest verbs in routes file