add `attr_accessible` to prevent mass-assignment issue when assigning setting values under Rails 3.x