marshalling request params, prevent mass assignment of user and link fields