move all attr_accessible params to controller in accordance with rails 4.0