fix devise strong params/cw issue