params permit for default_image_url