rails 4.0 update

remove attr_accessible