allow more attributes in devise account update, fixes #337