do not re-permit manually permitted params
Merge pull request #32 from AlexanderPavlenko/master

do not re-permit manually permitted params