Moved permitted params to its own module