un-permits unused parameters in UsersController