Added permit_params matcher and associated controller spec