removes mass assignment protection

The method should now only be called after the params where filtered, e.g. by strong_parameters