Remove ForbiddenAttributesProtection module from Order

Left over from master rebase on rails4 branch, we don't need that any
longer