Update admin controllers to permit attributes