Removed attr_accessible from user.rb