title: ActiveModel::MassAssignmentSecurity
body: <p>I get a ActiveModel::MassAssignmentSecurity::Error  when I try to running my app to save the login and password details. 
  got the following error</p>
  
  <p>Can't mass-assign protected attributes: name, password, password_confirmation, salt
  app/controllers/users_controller.rb:43:in <code>new'
  app/controllers/users_controller.rb:43:in</code>create'</p>
  
  <p>here is the code from the control file</p>
  
  <pre><code>class UsersController &lt; ApplicationController
    # GET /users
    # GET /users.json
    def index
      @users = User.all
  
      respond_to do |format|
        format.html # index.html.erb
        format.json { render json: @users }
      end
    end
  
    # GET /users/1
    # GET /users/1.json
    def show
      @user = User.find(params[:id])
  
      respond_to do |format|
        format.html # show.html.erb
        format.json { render json: @user }
      end
    end
  
    # GET /users/new
    # GET /users/new.json
    def new
      @user = User.new
  
      respond_to do |format|
        format.html # new.html.erb
        format.json { render json: @user }
      end
    end
  
    # GET /users/1/edit
    def edit
      @user = User.find(params[:id])
    end
  
    # POST /users
    # POST /users.json
    def create
      @user = User.new(params[:user])
  
      respond_to do |format|
        if @user.save
          format.html { redirect_to @user, notice: 'User was successfully created.' }
          format.json { render json: @user, status: :created, location: @user }
        else
          format.html { render action: "new" }
          format.json { render json: @user.errors, status: :unprocessable_entity }
        end
      end
    end
  
    # PUT /users/1
    # PUT /users/1.json
    def update
      @user = User.find(params[:id])
  
      respond_to do |format|
        if @user.update_attributes(params[:user])
          format.html { redirect_to @user, notice: 'User was successfully updated.' }
          format.json { head :no_content }
        else
          format.html { render action: "edit" }
          format.json { render json: @user.errors, status: :unprocessable_entity }
        end
      end
    end
  
    # DELETE /users/1
    # DELETE /users/1.json
    def destroy
      @user = User.find(params[:id])
      @user.destroy
  
      respond_to do |format|
        format.html { redirect_to users_url }
        format.json { head :no_content }
      end
    end
  end
  </code></pre>