fixes routes and rspec deprication warnings
updates user controller to use strong params