UsersController: Moved param handling into #strong_params