[DNM] Protect query methods from insecure parameters:

Raises an exception if ActionController::Parameters are passed directly
to a query method, or are a value passed to a query method.

This applies to `where`, `and`, `or`, and `nor`.

[ SECURITY-90 ]