rails 4 uses strong parameters vs att acdesable
use spree 2.2.x please bro