add permitted params to fields_controller.rb