minor: added attr_accessible to User model fields
Continued adding Devise code.