Add strong params for update in user_controller.rb