Whitelist params for build

[CyborgMaster]

Protector already handles whitelisting strong params for new create and update:

Model.new(params)
Model.create(params)
Model.first.update(params)

but it doesn't currently handle building off of an association:

associated = Model.first.associated_model.build(params)

This PR adds that capability.