removed attr_accessible for rails 4  compatibility