Rails bump devise security

Same as #115 but for rails4 branch