save in posts#create controller
fix forbidden attributes error