Added private methods to whitelist attributes for mass-assignments and cleaned up model code about attr_accessible and attr_protected