Added strong parameters to users and publications controllers

Signed-off-by: Cory Leistikow <cory.leistikow@gmail.com>