fix: strong parameters caused some trouble with password reset and confirmation