Removed admin and confirmed fields from mass assignment