add hidden and guarded attributes for post and user