Add strong params to the headshot controller

Makes workable for Rails 4.