rails 4 - fix mass assigned