Moved away from protected_attributes/attr_accessible to strong_parameters in the controller.