not use sanitize_for_mass_assignment to avoid warning message