Add note about mass-assignment.

A few people have found this tricky/confusing. Perhaps some
documentation will help.