commented out whitelist attributes since we are using strong_parameters