fix users_controller to allow :last_name to be saved