remove protected_attributes, and bring in strong_param behavior

Closes https://github.com/rubygems/rubygems.org/pull/664.