include ForbiddenAttributesProtection in ActiveRecord::Base