Add Rails-3-compatible strong parameters support

Patch idea: when attributes accessible is not required, it's no
longer included.