This line is pretty long. Typically we'll do something like this for strong params (as the permitted fields tends to get long):

```ruby
params.require(:user).permit(
  :email,
  :password
).merge(profile: user_profile)
```