settings controller needs to permit attributes to be updated in rails 4 apparently