Add id_number to permitted_params