diff --git a/app/controllers/spree/checkout_controller_decorator.rb b/app/controllers/spree/checkout_controller_decorator.rb
index 8e78ef4..02f7240 100644
--- a/app/controllers/spree/checkout_controller_decorator.rb
+++ b/app/controllers/spree/checkout_controller_decorator.rb
@@ -120,13 +120,14 @@ module Spree
 
       paypal_account = Spree::PaypalAccount.find_by_payer_id(params[:PayerID])
 
-      payment = @order.payments.create(
+      payment = @order.payments.create({
         :amount => ppx_auth_response.params["gross_amount"].to_f,
         :source => paypal_account,
         :source_type => 'Spree::PaypalAccount',
         :payment_method_id => params[:payment_method_id],
         :response_code => ppx_auth_response.params["ack"],
-        :avs_response => ppx_auth_response.avs_result["code"])
+        :avs_response => ppx_auth_response.avs_result["code"]},
+        :without_protection => true)
 
       payment.started_processing!
 
@@ -176,7 +177,7 @@ module Spree
     end
 
     def record_log(payment, response)
-      payment.log_entries.create(:details => response.to_yaml)
+      payment.log_entries.create({:details => response.to_yaml}, :without_protection => true)
     end
 
     def redirect_to_paypal_express_form_if_needed
diff --git a/app/models/spree/paypal_account.rb b/app/models/spree/paypal_account.rb
index cc09d6a..1cbe364 100644
--- a/app/models/spree/paypal_account.rb
+++ b/app/models/spree/paypal_account.rb
@@ -2,6 +2,8 @@ class Spree::PaypalAccount < ActiveRecord::Base
   attr_accessible :email, :payer_id, :payer_country, :payer_status
   has_many :payments, :as => :source
 
+  attr_accessible :email, :payer_id, :payer_country, :payer_status
+
   def actions
     %w{capture credit}
   end