added token to attr_accessible