Update CHANGES

`to_json` is safe in Rails 4