user can now have profile picture. the image was permitted in the params of the controller, which has now been added