Upgrade Devise to ~> 3.1.1, etc.

Remove :recoverable from User model.
Add random secret_key to Devise init config to satisfy requirement of Devise >= 3.1.

Fixes #354 
Fixes #355