remove user_id from attr_accessible list