Added private methods to whitelist attributes for mass-assignments and
cleaned up model code about attr_accessible and attr_protected