added accepted_params restriction to player creation