fix devise protected attributes