Replace test cases with Rspec.

Also some changes towards Rails 4 compatibility.
Remove `without_protection` and Rails 4 hack.

`without_protection` was removed in Rails 4.
Readme tweak.