Strong Parameters for Rails: Mass assignment in the controller

See also https://github.com/technoweenie/tainted_hash

Good to see there's some response from Rails core for last month's github kerfuffle.