added readonly attrs that shouldn't be added to POST or PUT