Use PermittedAttributes in other controllers as well

Help users extend it better