fixes #3917 - Added Strong Parmeters

If not set up, in development & test unpermitted parameters will be logged. On production, unpermitted parameters will be filtered out.
See [strong parameters gem](https://github.com/rails/strong_parameters#handling-of-unpermitted-keys).