I never even knew about attr_protected / attr_accessible until I saw them being used in acts_as_authenticated. Come to think of it, I learned a lot of good pra

I never even knew about attr_protected / attr_accessible until I saw them being used in acts_as_authenticated. Come to think of it, I learned a lot of good practices from AAA (and restful_authentication). attr_protected, salted/hashed passwords, and several other nifty tricks.