Removed attribute_accessible from user.rb