Change attr_accessible to attr_protected

Security test