Pull request - 11/10/14

Well, they're not strong params, but that's not an issue here because your RecipeForm class accesses only the particular parameters its expecting. The dangerous situation arises when you do something like this:
```
@user = User.new(params[:user])
```
Because active record automatically sets all the corresponding fields that have column in the database, you could inadvertently set something like "admin" without meaning to and then all someone would have to do to gain admin privileges would be to send the right HTTP request.