remove duplicated :payments_attributes in attr_accessible on Order

Fixes #3294