Add note about attr_accessible

This won't work without this.

Now, of course, this is a Rails 3 issue, which I assume the tutorials are for. In Rails 4, it would be different.