Mass assignment in Rails 3.2 bugfix