changed user model to use strong parameters