Since Rails 3.2.3 mass assignment doesn't work for new apps

Adding :without_protection => true to all create/update_attributes calls.

Not sure if this is the best solution - what you guys think?