no more attr_accessible for rails 4 copmatibility