attr_accessible for authentication_token