Update Devise per posted security bulletin

ref: https://groups.google.com/forum/?fromgroups=#!topic/plataformatec-devise/hj6i26Dvshw