Restrict attr_accessible on all models

Remove unneeded or dangerous attr_accessible on all models.