update devise to 3.1

While this could use a careful review I think we should get this in asap to deploy it to the dev pods and find any possible regressions. Updating a vital part like the authentication system to a version with breaking changes needs some careful testing, in particular we need to assert that sign in, sign up, reset password, change email, change password, remember me and invitations are still working properly.