migrate to Rails 4.0
use encrypted cookies on new installations
make heroku work again