Rails 4 fix: when using protected_attributes