used strong params in user cont