rails 402
revert to 96a90103
strong params for update_attributes