mass assignment fix

Use attr_accessible on Rails 4 if the "protected_attributes" gem is in use. Resolves #13.