remove attr_accessible (removed in Rails 4)