added new attr_accessibles to User model