adding whitelist attributes for active record 3.2