attempting to implement strong parameters
back to being hackable