Overrode Devise parameters, hopefully this isn't doing something insecure...