permit params of product scope in product_scopes_controller