added 'attr_accessible' rails 4