use strong params instead of attr_protected in member
spec confirming mass assignment weakness
use permitted params for member update
removed obsolete safety statement from update spec
test member creation
safe mass assignment in member#create
include ForbiddenAttributeProtection in correct file (model instead of controller)
covered second case of mass assignment in #create
actually return member
fixed tests (use project id)
Revert "fixed tests (use project id)"

This reverts commit 3e028beaba4788782098f7366e0d4c8aae338eb7.
more concise member creation using whitelisted member role IDs
fixed each_comma_seperated [sic]
fixed parens
Merge branch 'dev' into fix/mass_assignment_members_controller_3335
added changelog for fix #3335
updated bundler to 1.5 as it is required for support of ruby platform 2.1
bug: featuresteps: custom field set,wp field check
timelines: custom field filters.

for now only for list and boolean custom fields.
intendation changed.