rails 3 whitelist attributes and hack to use the old style YAML serialization