Mass assignment protection fixes