Migrated attachments to strong parameters. Work towards #27.
Updated to permit password_confirmation.