Use protected_attributes to avoid "strong parameters" related errors