Safer Rails parameters by default