Ensure that remote_files in attributes has been permitted

app/controllers/concerns/hyrax/works_controller_behavior.rb

@@ -360,6 +360,7 @@ def attributes_for_actor # rubocop:disable Metrics/MethodLength
       # that they have not removed from the upload widget.
       uploaded_files = params.fetch(:uploaded_files, [])
       selected_files = params.fetch(:selected_files, {}).values
+                             .map { |f| f.permit(:expires, :file_name, :url, {}) }
       browse_everything_urls = uploaded_files &
                                selected_files.map { |f| f[:url] }