use strong params with params.require(:project).permit(:name)