set config.active_record.whitelist_attributes=false for now