Exclude Devise versions vulnerable to CVE-2013-0233

Per issue #2744