Fixed #update action

Id param is automatically passed to service. There is no need to allow it
on PermittedParams anymore.