mass-assignment issue fixed