add empty task when task list is empty

And ignore mass assignment security error in Rails when updating since AngularResource sends created_at and updated_at as well.

Ideally, we'd not want Angular to send those attributes. For now, this will do.

The best method would be to use HTTP PATCH for updates.