Updating to Rails 4.1.8 for #114

Can't make use of the secrets.yml yet until the deployment and
environments change to have the ENV variable.
State machine needed the around validation extension to be compatible
with active record 4.1.
All the JS ajax tests had to explicitly change to be xhr requests
instead of regular get or posts.
Remove the none scope from session as AR now includes by default for all
models.