WARNING: Can't mass-assign protected attributes
I realised I'd confused the two below terms in my Rails model:
is built into Ruby and defines a getter and setter method for a class attribute.
is defined by Rails and makes the attribute mass-assignable.
Generally, in a Rails application, it's attr_accessible we want to be using.