mass assignment on the server (@WIP)