tested fix for mass-assign protected attributes and other warnings