fix highlight messages in rails4
remove row action, keep it as method only
check permissions again in render_field
fix #137: use to_param in links
update changelog