do not allow mass assignment of dangerous columns on sale model