Fix can't mass-assign protected attributes issue