remove user_params for admins and students#new

This fixes a bug where you could not access the new page because the controller action was expecting an argument user.