rewrote specs to RESTful, Hashie::Mash does not respond to permitted...