Fix cancan's mass-assignment error(create)