refactor - :activated is not attr_accessible

:admin and :activated shouldn't be attr_accessible. Use admin? and
account_activated? instead.