attr_accessible - kaboom!

This one didn't get committed before merging the last PR - sorry about that @jdutil