protected-attributes help for rails 3.2 apps