Security patches for Devise and JSON params parsing

1. Devise

[Security] Patch Devise for potential security problems
http://blog.plataformatec.com.br/2013/01/security-announcement-devise-v2-2-3-v2-1-3-v2-0-5-and-v1-5-3-released/
Devise not upgraded and just patched because the version
difference is too big and also due to ffi native extensions
compilation problems on my dev machine.

2. JSON params parsing

Security identifier CVE-2013-0333
More info here:
https://groups.google.com/forum/?fromgroups=#!topic/rubyonrails-security/1h2DR63ViGo