Bumps up rails and ruby, and turns off forgery protection

Merge pull request #3 from network-for-good/rails_5

Now using JWT.encode instead of hardcoded string

Updates qa token in specs

Resets dumy app db

Adds manifest.js to dummy app

Updates ruby version

Spec fixes

Updates gemspec for Rails 5

Merge pull request #2 from network-for-good/feature/PSTWO-9065_move_token_decoder_into_gem

Moves token decoder code into a separate gem

Merge pull request #1 from network-for-good/feature/PSTWO-9065_allow_decoding_of_both_primary_and_secondary_certs

If primary fails, attempt against secondary

only downcase if not nil

Merge branch 'master' of github.com:network-for-good/sso_authentication_api