add permited params for admin users