update rails to 4.1.7
allow password recovery without a name specified
update specs to handle user name missing