Fix deprecation warning

Including handler and format names in render paths (like
'_vanity.js.erb') is deprecated.
Detect protected_attributes in Rails 4
Merge pull request #212 from tmandry/fix-deprecation

Fix deprecation and support Rails 4 protected_attributes