Use params.permit to prevent mass assignment