Only attributes marked as editable should get set
Merge pull request #23 from projecthydra/protect_attributes

Only attributes marked as editable should get set