rails4 add protected attributes to atms controller