Fixes #11816 - Remove whitelist_attributes as it's deprecated

config.active_record.whitelist_attributes = false is already the default
so it's not necessary. Also Rails 4 deprecates it so we can remove it.