We don't need protected_attributes