Remove Rails 3 mass assignment config

Remove the last of the Rails 3 mass assignment configuration. Mass
assignment is allowed, as before, when outside of the controllers.

No additions are necessary for the controllers since the params
hash is effectively filtered by the `prefill!` and `postfill!`
class methods, and any mass assignment code added to them in the
future will be flagged automatically.