fixes #2322 ActiveModel::MassAssignmentSecurity::Error: Can't mass-assig...

...n protected attributes: