found source of bug in users controller and strong parameters