Fix permitted_params on projects and contributions controller