sanitized devise signup params, static controller crud