query_params working
permit and require in params