wrap update_attributes in a transaction

Looking for +1s, #update_attributes currently is not wrapped in a
transaction, but conceptually I believe it should be:

http://rails.lighthouseapp.com/projects/8994/tickets/922-has_many-through-transaction-rollback