update gemfile for rails ~> 4.1.4 and add permitted attributes as strong params