Update CONFIGURE.md for Rails 4

Rails 4 doesn't support or require a :without_protection => true option.