add protected_attributes