use attr-accessible for Photo, Address and Group. closes gh-357