Add specs to check mass-assignment gotchas in PhotosController.