validations and attr_accessible - done