because this is a Rails 3 application, we should make use of `attr_accessible` in our models