use protected_attributes until we can mote to strong_params