added strong params in controller