added the fields to be permitted in the user params