Added lookup for :attributes key in arguments passed to load_and_authorize_resource looking for a params sanitation method name.  The params sanitation method defined in the client apps controller is then used to get the params when loading the resource.
Fallback to legacy behavior if no attributes method specified.  Added spec for new attributes method functionality.