Require any attribute that is going to be mass assigned to be whitelisted, and whitelist those attributes which need it
notifications and diary comment notifications, turning the maill messages into reply messages through the site messaging system.