Rails 4 does not use attr_accessible, but strong parameters:

http://api.rubyonrails.org/classes/ActionController/StrongParameters.html