more ActiveModel::ForbiddenAttributesProtection blocks