Have created a separate module for attributes, to provide some better control for mass assignment.
Have reimplemented #attributes=: it now supports mass assignment security.