disable impressionist (mass assignment bug)
check collection method before validating user balance (API)