params.require (: cart) .permit (: book_id,: user_id)

bid: {
  status: '',
  assignment_id: 1,
  user_id: 1
}
Aggressive Anteater