Remove attr_accessible (we were allowing all attributes anyway)