add pem to mass assignment whitelist