Require active_model/mass_assignment_security in mass assignment
security tests.

Fixes #22.