devise's preferable way of allowing additional params for sign up
https://github.com/plataformatec/devise/tree/rails4#strong-parameters