set attributes individually to avoid mass assignment issues