I'm facing a small issue here with protected columns from being updated.
So I thought attr_protected is the solution, but this destroy my
creation of user?
attr_protected means you cannot assign the attribute using create (or
It does not mean that you can't do user.email = '...'