Fix can't mass assign protected attributes