remove protect_from_forgery