Add permitted_params grape helper to DRY up code.

Covers the common case of wanting to filter params based on what is declared, without including missing ones.