permit owner_id in params, fix typo. #20