update devise dependency. downgrade version to play nicely with spree