disabled whitelist_attributes for development