Instead c = b.security.create(security: "Facebook", category: "Tech")
you need b.create_security(security: "Facebook", category: "Tech")
. This similar to
b.security = Security.new;
b.security.save; b.security
Read doc for ActiveRecord::Base#belongs_to