protected_attributes rails 4 fixes