title: Can't mass assign protected attributes
body: <p>My <code>features</code> file looks at this:</p>
  
  <pre><code>Given there are the following users:
      | email              | password | admin |
      | admin@ticketee.com | password | true  |
  </code></pre>
  
  <p>And my <code>user</code> model doesn't declare the admin attribute as <code>attr_accessible</code> to prevent mass assignment. Accordingly, I've made changes to the <code>user_steps.rb</code> file to tackle this.</p>
  
  <pre><code>Given /^there are the following users:$/ do |table|
    table.hashes.each do |attributes|
     unconfirmed = attributes.delete("unconfirmed") == "true"
     @user = User.create!(attributes)
     @user.update_attribute("admin", attributes["admin"] == "true")
     @user.confirm! unless unconfirmed
   end
  end
  </code></pre>
  
  <p>Now this is supposed to work according to the book - Rails3 in action. I checked the code on their <a href="https://github.com/rails3book/ticketee/tree/chapter_7" rel="nofollow">online repo</a> as well. 
  Running this with cucumber gives the following error:</p>
  
  <pre><code>Can't mass-assign protected attributes: admin (ActiveModel::MassAssignmentSecurity::Error)
    ./features/step_definitions/user_steps.rb:4:in `block (2 levels) in &lt;top (required)&gt;'
    ./features/step_definitions/user_steps.rb:2:in `each'
    ./features/step_definitions/user_steps.rb:2:in `/^there are the following users:$/'
    features/creating_projects.feature:7:in `Given there are the following users:'
  </code></pre>
  
  <p>Any help would be greatly appreciated. I really cant figure what's wrong here. </p>
  
  <p>Thanks a lot!</p>