use controller permitted params
add procfile for heroku