took out gemfile protected_attributes