Rails-like sensitive param scrubbing behavior

* Adds the Rails behavior of converting the list of configured filter_parameters to a regexp that matches param names
* Adds handle for param values that are arrays, which may contain hashes
* Removes a DOS vulnerability caused by calling `to_sym` on all param keys. See http://brakemanscanner.org/docs/warning_types/denial_of_service/