fix can't mass assign protected attribute otu_id