Fix forbidden attributes error for PostsController#update