change permit! for volunteer ops controller to params.require().permit