Oh well, it's protected attributes.
Explicitly use protected_attributes in test sample.