add expires_at as attr_accessible