permitting values in book controller