add attr_accessible in flagging.rb for rails 3.2+