removed attr_accessible for rails 4.0