remove all mass_assignment
update cancan to cancancan,update devise form 2.3 to 3.2.4