fix mass assignment problem