fixed bug in migration and added attr_protected to file_asset_holder