not use mass assignment for Rails 4

small change to stop using mass assignment so it will be compatible with Rails 4