Fix virtual Time attributes on Player. Closes #27.

composed_of was causing problems and is falling out of favor in the
community. This direct metaprogramming works and is arguably more
robust (and possibly even more readable).
Rails 4: Whitelist virtual parameters

Because strong parameters is on by default. Real attributes are currently
whitelisted automatically.