User update: Add missing admin and login fields to permitted params