remove `:is_admin` from `attr_accessible` fields (it must be protected)