Add test to ensure which attributes are not audited when uses ':only'

This scenario is very common when running rake db:migrate from scratch
in a rails app that uses devise.

This is a pull request currently waiting on the main audited repo, but it appears to fix our problem. I still need to test it out, though.