fix security leak regarding attr_accessible
add paranthesises for readability