update user model attr_accessible