removed attr_accessible for rails 4