Remove protected_attributes, welcome strong_parameters

This closes #46.