I think this should call `permit` right? Then pass `permitted_variant_attributes`. Similar to whats done above with `product_params`. Same would go for the `option_types_params` method below.