add attr_accessor in user.rb to fix no method errs
add protected_attr gem
user account UI tweaks