update for rails 4.1.8 with strong_parameters