Add additional_permitted_attributes parameter

See diff for a description of the parameter.

Part of https://www.openproject.org/work_packages/5553

**DON'T MERGE YET**
Requires `feature/users_strong_parameters` on opf/openproject to be merged.