add attr_accessible for active_record