Add docs about permit_params and overriding controller actions

[ci skip]