fixes #8801 Includes a test reproducing 500 on lynx We now make use of ActionController::Parameters require and permit methods.