default_scope explicitly require a block, now
attr_accessible no longer exist. User params.require/permits in controller instead.