using the jsonapi-utils gives us a helper resource_params which will include all permitted data from active record params. Having a custom route for
jsonapi-utils
resource_params