rails4 + mongoid + devise remove attr_accessible

As an extra to
https://github.com/RailsApps/rails_apps_composer/pull/233 , avoid copy
user model from the rails3-mongoid-devise repo.