need to use protected_attributes gem w/ rails 4.0