Swapped protected_attributes for strong params