Add `strong_parameters`

While we should avoid mass_assignment, I've added `strong_parameters` gem.
Stable version of devise doesn't work with `strong_parameters` yet, so we have to add some controllers to permit parameters.