added allowed_param to update_profile_image