removed attr_accessible and switched to strong parameters