User: Move auth_source_id filtering to PermittedParams