Remove username from permitted params from admin user controller