Bump paranoia to 2.0 for rails 4 support

Fixes #3476

Also no need to set `delete_at: nil` in variant scopes as paranoia
already does it by using `default_scope`