I'm not sure if we consistently use strong params. We should confirm that we do so throughout the app.
