added password/password_confirmation to strong params for users