test by removing params_id
Merge branch 'master' of heroku.com:paulrekowski
fix forbidden attr error in user_controller