Secure Rails parameters by default