Whitelist UserController#signup params

Protects from mass-assignment exploit attempts