Support both major versions of fernet

This aims to support both major versions of fernet.

* To use 1.6, the app will have to specify that version in it's Gemfile, or the latest version will be used by default.
* To use 2.0, just specify attr_secure.
2.0 is out. I'd suggest `< 3.0`.