form_for view helper method and Controller#update to use mass assignment