Explicitly define parameters

Using any attribute as a parameter was causing conflicts with other libraries and presented a risk of sending arbitrary data to the server.

This pull request introduces a `parameter` class method that whitelists the attributes that we actually expect to be in the json.

The actual changes are in `Inbox::RestfulModel` and in `Inbox::Parameters`. The rest is just updating references from `attr_accessor` to `parameter`.