Upgrade rails to 4.0.2 and protected_attributes to 1.0.5

Critical security issue for Rails 4.0.1: http://seclists.org/oss-sec/2013/q4/400