Don't throw params to User model.
Don't throw params to User model.

Because storing everything in the session/params is bad.
Fixes storing plaintext in the User model.

carols10cents/rstat.us,carols10cents/rstat.us,carols10cents/rstat.us