remove attr_accessible for rails 4