Sanitize params

WIP. Opening PR for discussion.

I didn't want to reinvent the wheel so the [parameter_filter.rb](lib/napa/param_sanitizer/parameter_filter.rb) is from Rails' ActionDispatch. 

@bellycard/platform