add attribute_normalizer gem; fix permission validation