upgraded to rails4
add basic user manually
whitelist_attributes=false