Security update for devise