#113 fixed permitted attributes on blog posts controller