permitted params fixes