update devise and use strong params