Minor change in controller for permitted_params