Fix user_id unpermitted issue in post params