added active to user controller whitelist
Merge pull request #26 from rtxwebdev1/ROC-165

added "active" to user controller whitelist