user model attr_accessible add device_token