set attr_accessible for ActiveRecord < 4