replacing attr_accessible with params method