Add note about mass-assignment.

A few people have found this tricky/confusing. Perhaps some
documentation will help.
Merge pull request #1064 from cakephp/new-entity-warning

Add note about mass-assignment.