require protected_attributes only if testing rails 4