bundle update
Use @token since record now has hashed token in Devise 3.1
Don't fail on a timesheet for someone who's still on duty
Check involvement non-nil and exists
Add friendly_id to positions
Link credit schemes to positions by slug