Upgrade to Rails 2.3.12, Devise 2.2, strong_parameters

* Switches to strong_parameters for mass-assignment protection.
* Includes commits from PR #10.