mass-assignment error fixed