Changed params.permit on admin/course and /user