update to strong params

Removed 'protected_attributes' gem and converted most files' attributes to strong params. Avoided Activity model and related in anticipation of coming changes.