Upgrade to Rails 4

No deprecation warnings but gem protected_attributes is in use.