removed mass assignment of user_id in the users model