annotate
add strong_parameters support for Devise, and allow admin users to edit users