use permitted_params for role
add changelog entry
Merge pull request #18 from finnlabs/fix/permitted_params_for_role

Fix/permitted params for role