adding company_name and other user params as permitted params