updated strong parameters in user controller