implement query filtering, ref #905
save original parameters
add :with parameters to :allow if :allow is enabled
configure routes with controller options
add tests form params protection
rename :allow to :params, allow filtering GET, parse true/false
filter collections and arrays properly
allow false params with controller option
update examples
fix tests
Merge pull request #1678 from padrino/mass-assign

implement query parameters filtering, can prevent mass-assignment, closes #905