mass assignment change for rails 4