ActiveRecord::Base.public_send(:include, ActiveModel::ForbiddenAttributesProtection)