add permit params to admin/events