use has_many rather than has_and_belongs_to_many