allow :name, :nickname in strong parameters for devise account_update