replace secret_token with secret_key_base (rails 4 deprecation)
remove some sass-rails deprecation warnings
web connect is only needed in integration tests
disable attribute whitelisting
merge master