commented out attr_accessable until can implement strong_params