Fix strong params stuff for api endpoints