add bought_at param to strong parameters