do not use attr_accessible (yet) - mass assignment errors occur