fixed attr_accessible for form fields