turn off whitelist-attributes in spec dummy (not used in Rails 4)
update dependencies
add spec license