fix mass-assignment configuration