in app/controllers/password_resets_controller.rb [39:42]
def user_params params.require(:user).permit(:password, :password_confirmation) end