Added guarded attribute to user model for mass assignment protection