commenting out attr_accessible from roledecorator