Rails CVE-2014-3514: Strong Parameter bypass with create_with
groups.google.com