ensure :name is a permitted write attribute for new/update user forms