strong params
validate user create
error formatting
flash message