Upgrade devise to 3.2

Removed support for changing email for confirmation after initial
signup to reduce code maintenance. Any accounts which have never had an
email address confirmed may resend the confirmation email, or else an
admin can change the user's email address.

Username regex made a bit more strict with adjacent dots disallowed. Bad
usernames will be reset based on the email address.