Bump devise to 2.2.5

Bring fix for CSRF token fixation attacks as described in
http://blog.plataformatec.com.br/2013/08/csrf-token-fixation-attacks-in-devise/