premitting params in create and update