Allow plugins to add permitted attributes
Add spec for PermittedParams.add_permitted_attributes