fixed controller method to not use strong params from v4.0