GDS::SSO::User correctly exposes attrs for mass-assignment

attr_accessible was never being called because included syntax was wrong.

Please can we have a version bump after this is merged?