fixed permitted params to correct attributes