Allow Ransack 4 to be used

Breaking Changes
[SECURITY] Require explict allowlisting of attributes and associations
https://github.com/activerecord-hackery/ransack/blob/main/CHANGELOG.md#400---2023-02-09