diff --git a/app/controllers/cards/steps_controller.rb b/app/controllers/cards/steps_controller.rb
index 8821289b7..4f3434632 100644
--- a/app/controllers/cards/steps_controller.rb
+++ b/app/controllers/cards/steps_controller.rb
@@ -30,6 +30,6 @@ class Cards::StepsController < ApplicationController
     end
 
     def step_params
-      params.require(:step).permit(:content, :completed)
+      params.expect(step: [ :content, :completed ])
     end
 end