do not re-permit manually permitted params

Fixes https://github.com/inossidabile/protector/issues/30
Permitting by attributes list doesn't work in general case when attribute isn't a scalar.