title: Can't mass-assign protected attributes: first_name, last_name, email, password, password_confirmation
body: <p>I have <code>user</code> model with use of <a href="https://github.com/plataformatec/devise" rel="nofollow">devise gem</a>, I dont have <code>attr_accessible</code> for any fields still I get the error: </p>
  
  <blockquote>
    <p>Can't mass-assign protected attributes</p>
  </blockquote>
  
  <p>My <code>User</code> class as below</p>
  
  <pre><code>class User &lt; ActiveRecord::Base
    devise :database_authenticatable, :registerable,
           :recoverable, :rememberable, :trackable, 
           :token_authenticatable  #, :validatable
  end
  </code></pre>