Refactored assessment controller - use strong parameters, don't load and authorize when creating an assessment.