fixed guarded/fillable arrays in player and user model