Add #permitted_param? helper method for use in views

Signed-off-by: Steven Hoffman <git@fustrate.com>