Fixed create and update actions to use form_for's params subhash