added movie params permitted list to movies_controller