Migration to 3.2

- ensure we include attr_accessible on models (whitelist attributes
accessible to forms)