removed slug from permitted params