filter parameters to prevent sql injection through devise
Merge pull request #737 from code-dot-org/fix-devise-sql-injection

filter parameters to prevent sql injection through devise