require protected_attributes in gemfile