Backend taxon controller now using Spree::PermittedAttributes

Fixes #4069