Remove attr_accessible tag in user.rb