add strong params to users #82