security gemfile, whitelist attr, .mass_assignment_sanitize removed or defaulted