Update to Rails 3.2.14 and assume attributes are safe