[Fix #3335] Mass assignment in members controller

[WP #3335](https://www.openproject.org/work_packages/3335)