Update to strong parameters in Users controller, delete attr_accessor from module.