use strong params instead of attr_protected in member
spec confirming mass assignment weakness
use permitted params for member update
removed obsolete safety statement from update spec
test member creation
safe mass assignment in member#create
include ForbiddenAttributeProtection in correct file (model instead of controller)
covered second case of mass assignment in #create
actually return member
fixed tests (use project id)
Revert "fixed tests (use project id)"

This reverts commit 3e028beaba4788782098f7366e0d4c8aae338eb7.
more concise member creation using whitelisted member role IDs
fixed each_comma_seperated [sic]
fixed parens
Merge branch 'dev' into fix/mass_assignment_members_controller_3335
added changelog for fix #3335
Renamed Issue tracking to Work package tracking
added copyrights to migration
added a space
adjust redirects to respect possible subdirectory configuration