add strong params gem, add declaration to models, change config/application.rb