Update the ruby version and gemset settings.
Allow workflows to be embedded in iframes.

Rails 4 needs the X-Frame-Options header to be set to "ALLOWALL" for this.
Rename the example server config file.
Update the workflows JSON output.

Now outputs title and description.
Stop forgery protection from raising exceptions in API calls.

API calls don't have the CSRF tokens but are legit so allow them to happen in a
null session. They are authenticated every time, so they don't need a real
session.