fixes #7568 - remove attr_accessible and attr_protected for rails 4 upgrade