class UsersController < ApplicationController
  def update
    user = User.first
    user.update(user_params)
  end

  private

  def user_params
    params.require(:user).permit(:name, :email)
  end
end

class UsersController < ApplicationController
  def update
    user = User.first
    user.update(user_params.merge(password: 'password'))
  end

  private

  def user_params
    params.require(:user).permit(:name, :email)
  end
end