Use permitted step_params method
Use permitted step_params method

This avoids permitting all parameters and instead only accepts the
ones we need.

alphagov/collections-publisher,alphagov/collections-publisher,alphagov/collections-publisher