trying to sort out username on user permitted parameter list, no luck yet