Switching over to pundit for permitted params