Bump rails to 4.1.6
Use size instead of length in views

I presume size used to work but it does not now for some reason.
Switch to strong parameters

I had been using protected attributes to ease the transition from Rails
3.  Seemed time to make the conversion to Rails 4's strong parameters.

I was inconsistent in the controllers about specifying dasherize: false
when generating an XML representation of a model.  Now all such cases
specify dasherize: false.

Several controllers used a bogus route helper in their destroy method,
that has been fixed.

Write tests for affected controllers.