Cleaned out gem versions, set rails to 4.1.x; added protected_attributes
Updated for rails 4.1, per recommended settings
Updated README with create user API endpoint