Make update and update! work with protected_attributes

Closes #44