update migration with the without_protection option to disable mass assignment protection