#603

Here's a pull request with the progress so far.
@vanstee solved it by using fetch instead of require for :person
```
def person_params
  params.require(:user).permit(:name, :email).merge(params.fetch(:person, {}).permit(:avatar))
end
```