Bump acts_as_list to 0.3.0 (rails4 compatible)

Version 0.3.0 removes unwanted (and incompatible) `attr_accessible`'s