add gem safe_attributes for permission_resources controller