removed unneccesary CSRF code
added strong parameters to create action
removed parameter in addEntry() call
if statements in correct place now