changed strong parameters in application controller to allow all