added protected_attributes gem to be able to upgrade to rails 4