Adding timezone and locale to allowed user params closes #754