use strong parameters on estimate controller