Fix specs.
Fix redirect_to. Implement strong_params.
Remove validation; set default value instead.