fix bug in set attr_accessible