Bugfixes for rails 4.0.0beta

strong_parameters was preventing the invited user from choosing a
password, and assign_attributes was being called the old way in one
place