do not inject strong parameters into action controller. individual controllers can include the module manually.