added first and last to .permit for users. uncommented validations for user creation