product fields require attr accessible for mass assignment