remove attr_accessible course_id, :user_id
refactoring