Preserve Session construction compatibility without attr_accessible

Fixes rails/activerecord-session_store#6