permit strong params for active_admin