remove dependency on protected_attributes