Avoid using attr_protected for user email