Stop explicit use of Rack::Protection

As Sinatra now uses it anyhow, and will configure it to work correctly
(e.g., without Sessions). As it was, our explict use was causing
failures with the following message: "you need to set up a session
middleware *before* Rack::Protection::RemoteToken"
Upgrade to Ruby 2.1