[DO NOT MERGE] fixes #7568 - remove attr_accessible and attr_protected for rails 4 upgrade

in favor of strong parameters issue #3917