removed attr_protected to work with rails4