use Spree::PermittedAttributes to allow extension

Use the class variables in core designed to allow extension to the permitted attributes.