Add permitted_params to contributions and projects controller