add strong parameters to app controller for devise