Please read for an updated status on RailsCasts:
Learn more or hide this
GitHub User: Evan-M
I believe the ActiveModel::MassAssignmentSecurity module was changed for the release of Rails 3.1.
Now you can do this (in a non-ActiveRecord class):
attr_accessible :first_name, :last_name
attr_accessible :first_name, :last_name, :plan_id, :as => :admin