Comment out or remove attr_accessible lines

- This will probably be rebased out in future - this is to help with
  remote pairing.
We no longer need to patch action_controller/template_assertions.rb

- Rails 4 implements the things we needed to backport to Rails 3.
Make the whitelisted_hosts controller use strong parameters