RailsApps/rails_apps_composer — pull request #115 by listrophy (2012-09-15 16:29:31+00:00)
Title: Remove provider and uid from attr_accessible

Leaving `:provider` and `:uid` in the user model's `attr_accessible` list constitutes a security risk.

Not sure if this needs to be addressed in more places. :/