fixed input allowd params in controller