Create params whitelist method and add it to create and update