Stops create_or_update_thumbnail from using without_protection on all...

...rails versions except for major release number 3

This was creating an exception with active record for too many args on rails 4.

The second commit fixes a deprecation warning around how Rails 4 handles find_or_initialize_by.