Merge pull request #1103 from ualbertalib/user_controller

Add permitted attributes to user controller

Author: mbarnett

app/controllers/users_controller.rb

@@ -64,4 +64,11 @@ def set_saml
     end
   end
 
+  protected
+
+  def user_params
+    params.require(:user).permit(:display_name, :avatar, :facebook_handle, :twitter_handle,
+                               :googleplus_handle, :remove_avatar, :orcid)
+  end
+
 end