commented out attr_acc in user.rb