Update CONFIGURE.md for Rails 4

Rails 4 doesn't support a :without_protection => true option.