config/devise_param_protected.rb

devise_param_protected.rb

Devise::ConfirmationsController.class_eval do
  param_accessible user: [ :email ], only: [ :create ]
end

Devise::PasswordsController.class_eval do
  param_accessible user: [ :email ], only: [ :create ]

  param_accessible :reset_password_token, only: [ :edit ]

  param_accessible user: [
    :password, :password_confirmation, :reset_password_token
  ], only: [ :update ]
end

Devise::RegistrationsController.class_eval do
  param_accessible user: [
    :username, :email, :password, :password_confirmation
  ], only: [ :create, :update ]

  param_accessible user: [ :current_password ], only: [ :update ]
end

Devise::SessionsController.class_eval do
  param_accessible user: [ :login, :password, :remember_me ]

  param_accessible admin: [ :login, :password, :remember_me ]
end


Devise::UnlocksController.class_eval do
  param_accessible user: [ :email ], only: [ :create ]
end