ok this is where strong_parameters makes much more sense.