add protected_attributes to gemfile