Fix bug with permitted parameters.

After `college', `first_name', and `last_name' fields were added to
user, the parameters were not permitted during controller sanitization.
This allows them, which fixes sign-up and account editting issues.