remove whitelist_attributes