User controller

Since we're using rails 4, we may need to implement strong parama/private methods in order for create and update to work. See http://edgeapi.rubyonrails.org/classes/ActionController/StrongParameters.html