removed attr_accessible from the user model, in Rails 4 this goes against the strong attributes protection