Use ForbiddenAttributesProtection for User

This removes safe_attributes and attr_protected on User and adds ForbiddenAttributesProtection as single mass assignment protection.

Renaming user to current_user is necessary as we're adding a user method.

This should bring us a little step closer to Rails 4.

Implemented as part of https://www.openproject.org/work_packages/5553