added att_protected to all models so they work in rails4