remove routines controller, add strong params for workouts and notes