allow attributes in update