fix ForbiddenAttributesError for EssenceFile

- real EssenceFilesController#update spec
- permit EssenceFile attributes for mass assignment