uncommented both strong_parameters and protected_attributes