add attr_accesssible to fix ActiveRecord MassAssignmentSecurity error