fix mass-assignment for user