attr_accessible in supplier model

This one didn't get committed before merging the last PR - sorry about that @jdutil