removed attr_accessible in the test User model