added missing permit params to activeadmin controllers