Multiple updates

* Secret token is set to env var or generated randomly.
* Updated CAS authentication.
    - Removed tgt cookie check. Use stock rubycas-server.
* Added attr_accessible to models.
* Removed unused table.
* Updated specs and gems.