initial work on upgrade to Rails 4
switch to strong parameters instead of protected attributes; couple of deprecation fixes
Fixed XhrRequestConstraint.
Marked XHR routing specs as pending b/c don't know how to mock Ajax header.
Merge pull request #487 from duke-libraries/iss228

Iss228