Check for MassAssignmentSecurity constant when deciding to set attr_accessible

ActiveRecord 4 *may* require setting attr_accessible if the 'protected_attributes' gem is installed. This changes checks for that case.