lock to devise < 3.2
fix param expectation in tests