Avoid warning about symbolizing safe parameters

As reported in #536, `params[:controller]` and `params[:action]` are hard if not impossible to manipulate for DoS via symbol creation.