prevent _destroy against spurious HTML forms values
avoid strings in record ids
don't forget to convert nested items to update