Removed :without_protection for Rails 4.0 compatibility