Whitelist memberships_attributes for group controller.  Close #333.