added strong params to user controller
fixed strong params
changed all href to link_to
fixed a typo, not code*