Devise: configured parameters to permit on signup/signin
Devise: only respond to json (is this setting deprecated?)
Users: unique constraint on email/username
restricting UsersController routes
Users Controller
User: added validations
updated client