Fix #49 Creation of new roles by params

I'll come up with a better way for this later, but figured its best to get out a fix quickly as this could be a security issue. without this fix, by going to **/users/sign_up?plan=admin** a user can sign themselves up as an admin.