use permitted_params for group_controller

make code climate happy