fixed strong params bug in product controller