created a params private method in the users controller